Privacy

On your own

You don't need an account to use the app on your own. Your cases, photos, locations, notes, details and signature are stored in CivilStamp on your phone. They leave it only when you share a PDF or a backup, turn on Save a copy to Photos, back up your iPhone, or move a case to an agency. On Android, the phone's own backup keeps only your free photo count and the plan you bought, never your records.

The signature you draw to sign documents stays on your phone. It isn't uploaded and isn't in your backups.

Signing in

To work with an agency, you need an account. You sign in with an email and password, with Apple, with Google, with a passkey or with a one-time code from your agency. We keep your email, your name and how you sign in.

• Passwords are stored only as a scrambled hash, never as you typed them.
• Apple and Google tell us your name, your email and an ID for your account with them. If you hide your email with Apple, we get Apple's relay address.
• Passkeys stay in your phone, computer or password manager. We keep only the public half and the name you give it.
• Two-step sign-in, if you turn it on, keeps a secret shared with your authenticator app.
• A code from your agency makes an account with no email until you add yours and confirm it.

We email a notice when your password, email or two-step setting changes.

Working with an agency

An agency's cases, with the people, addresses and papers on them, are stored with Supabase. The cases assigned to you come to your phone, and the visits you record on them upload to the agency with their photos, locations and notes, along with your name, phone and registration or title for its reports. While you're signed in, cases you start go to the agency too.

Service records and other documents signed for an agency case are saved with the case, with who signed and when. The agency's clients, prices, invoices and the emails it sends clients from CivilStamp are stored the same way.

If you allow notifications, we keep your phone's notification ID to tell you about new cases and cases taken off your list. It goes through Apple on iPhone and Firebase Cloud Messaging (Google) on Android.

In an agency, owners and office people see every case, visit and person on the team. Servers see the cases assigned to them. Nobody can change or delete a visit once it's uploaded. It stays with the agency when you sign out, leave or delete your account.

What our admin tools show

Our admin tools show agencies, their plans and bills, and their people's names, emails, roles, how they sign in, whether two-step is on and when they last signed in. They never show what's in a case, a visit, a document or a photo. We look at an agency's cases only when it asks us in to help.

Maps, scanning and Photo Check

Apple Maps provides the iPhone app's maps, address suggestions, directions and Look Around. Apple's MapKit JS draws the maps on civilstamp.com. To place a case on a map, we send Apple the street, city, state and ZIP, never names, case numbers or photos. Address searches go to Apple to find matches.

On Android, Google Maps provides the maps and directions, and Google Play services finds addresses. The app sends Google the same street, city, state and ZIP, and nothing else.

Apple and Google handle these requests under their own privacy policies. Scanning papers and Photo Check run on your phone. Scanned pages aren't kept or sent anywhere.

Payments

Apple handles purchases in the iPhone app, and Google Play in the Android app. When the app checks your purchases, it sends no photos, names, addresses, case details or locations.

Agencies pay through Stripe. Stripe keeps the card or bank account and the billing address, which it uses to work out sales tax. We never see the full card number. We keep the agency's bills and how many people each one counted.

Who handles data for us

• Supabase stores accounts, agency cases, visits, photos and documents, in the United States.
• Resend sends our emails, such as sign-in codes, agency codes and the emails agencies send their clients.
• Cloudflare runs civilstamp.com.
• Stripe handles agency billing.
• Apple handles Sign in with Apple, iPhone notifications, maps and App Store purchases.
• Google handles Google sign-in, Android notifications through Firebase, maps on Android and Google Play purchases.
• Microsoft 365 holds our own email, including what you send to [email protected].

They use the data only to provide their service to us. We don't sell data or use it for advertising.

No ads or tracking

CivilStamp has no ads, analytics or tracking, in the app or on the website. civilstamp.com uses your browser's storage only to keep you signed in and remember your choices. The sign-in page loads Apple's and Google's sign-in buttons, which follow their own policies. Since nothing tracks you, the site works the same whether or not your browser sends Do Not Track.

How long we keep things

• An agency's cases, visits, photos and documents stay while the agency exists, paying or not. They're deleted when the agency closes or its last member deletes their account.
• Your account stays until you delete it.
• Deleted data leaves our database backups within 7 days.
• Stripe keeps billing records as the law requires. Past bills stay there after an agency closes.

Deleting your data

On your own, your records stay on your phone until you use Delete all records in Settings or remove the app. Copies you've shared, saved to Photos or backed up aren't affected.

To delete your account, use Delete account in the app's Settings or on civilstamp.com. It erases your sign-in and your details. If you signed in with Apple and delete your account on iPhone or civilstamp.com, we also end CivilStamp's access to your Apple ID. Visits and documents you sent stay with your agency under the name saved in them. If you're the only person in an agency, the agency is deleted too, with its cases, visits, photos and documents, and its saved card is removed from Stripe.

Changes and questions

If this policy changes, we'll update this page and its date. Questions go to [email protected].